$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/3bd4f872-e26f-35f8-a13e-e77138c765f8.roa File: 3bd4f872-e26f-35f8-a13e-e77138c765f8.roa (raw, json) Hash identifier: 1N2KdrTBhAM31RmqEvkTtoxnPuJh4gXb53Zf3A01Wg0= Subject key identifier: 05:28:AA:7C:3D:EA:42:CB:B7:7E:C6:3D:C4:CE:27:69:C7:CB:8B:94 Certificate issuer: /CN=736df059-86cb-4a7f-b49e-44e0134dfbca Certificate serial: 010D0C9F4328584B0B76B3ACBE983DE3B21FCA10 Authority key identifier: 59:F8:F0:E7:94:84:3E:ED:71:41:6D:A2:1D:5D:FA:BF:A7:6B:18:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/3bd4f872-e26f-35f8-a13e-e77138c765f8.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 23260 IP address blocks: 66.9.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/736df059-86cb-4a7f-b49e-44e0134dfbca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/736df059-86cb-4a7f-b49e-44e0134dfbca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:b3:ac:be:98:3d:e3:b2:1f:ca:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=736df059-86cb-4a7f-b49e-44e0134dfbca Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=7953d927-db6a-4c3f-925e-c40a441befff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:03:26:1d:17:72:ab:4d:56:33:77:66:8f:62: fe:40:2f:78:6f:76:f4:ac:76:74:3d:0f:a9:3a:da: a4:f7:48:34:08:70:94:cc:13:13:f3:bd:8d:6b:f6: bf:f0:da:f2:a4:6b:18:e3:f8:36:0e:49:85:89:56: cc:91:f6:2b:4d:7b:9a:00:6b:65:21:90:31:a7:49: 15:60:a5:ec:11:05:dc:55:dc:03:f2:51:39:93:b9: a4:37:3a:7f:bd:d9:be:12:df:b1:af:38:2f:1e:4d: 9d:1f:3b:42:2e:70:9f:76:6e:57:c7:8c:cb:92:4e: ac:33:9b:6d:91:8a:5d:d9:b2:6c:ca:9b:a3:01:59: 15:e6:84:aa:37:e1:ff:c6:22:42:24:80:2e:56:c4: 01:78:00:2d:4c:26:94:5e:1f:72:88:c8:85:de:5f: 54:33:6d:95:73:57:b8:98:4f:01:1b:ea:e1:eb:20: e6:0b:e2:2a:1f:86:5a:f7:e6:05:1f:82:29:5a:84: 51:a0:af:b3:00:51:a1:e3:dd:b2:70:f8:1d:00:51: ac:38:ef:f8:30:0f:ba:de:e6:f7:06:b6:66:49:7a: 69:0e:24:ca:67:73:0b:4e:01:0e:0f:ac:09:2e:b2: d0:9b:9a:8f:c2:50:dc:36:cc:2a:52:95:bf:53:ff: 23:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:28:AA:7C:3D:EA:42:CB:B7:7E:C6:3D:C4:CE:27:69:C7:CB:8B:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/3bd4f872-e26f-35f8-a13e-e77138c765f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/736df059-86cb-4a7f-b49e-44e0134dfbca.crl X509v3 Authority Key Identifier: keyid:59:F8:F0:E7:94:84:3E:ED:71:41:6D:A2:1D:5D:FA:BF:A7:6B:18:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca.cer sbgp-ipAddrBlock: critical IPv4: 66.9.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ee:99:c1:9e:e8:75:9d:4e:1e:f5:d0:db:98:89:01:dd:66: 2b:94:5e:03:1f:6d:35:b7:04:68:6e:6a:b5:d3:c1:0c:31:b6: 16:2b:aa:f6:d9:fc:01:d3:b6:e7:c0:42:55:f9:a3:6e:f9:e0: d9:7a:c4:d1:7a:b3:57:25:9f:7f:26:43:fa:83:66:fd:e3:78: bd:f3:b7:40:3e:37:3c:f8:8d:19:a7:07:c5:f5:a5:07:40:da: 3a:7f:8e:d3:c9:c2:a5:f6:cc:fd:ea:36:9f:72:52:31:82:49: 8c:c3:c9:61:36:5a:0d:af:2a:5e:7f:9c:3e:e8:42:c9:9d:3c: 60:e7:4a:30:20:2c:2a:1c:6f:dd:93:65:72:96:56:15:f4:ee: 56:3b:d8:8b:c4:8d:f1:33:42:4e:7e:9c:72:f2:b7:94:35:11: b0:c1:60:f9:3b:1f:a0:da:47:c6:0b:70:94:1c:d1:11:99:f1: 39:f3:25:86:d7:3a:b9:04:e4:a1:50:44:7a:80:cc:77:b7:1f: 7d:c0:27:82:e1:3f:4a:80:99:69:85:f6:7c:d1:9b:33:24:10: d1:7c:42:1f:87:6e:d5:e2:d0:0c:52:ad:6c:a4:16:fb:8b:10: 32:b3:be:08:24:5c:84:98:e1:a8:f4:4d:c5:e8:66:83:c8:0e: 5b:3b:3c:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdrOsvpg947IfyhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzM2ZGYwNTktODZjYi00YTdmLWI0OWUtNDRlMDEzNGRm YmNhMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk Nzk1M2Q5MjctZGI2YS00YzNmLTkyNWUtYzQwYTQ0MWJlZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgMmHRdyq01WM3dmj2L+QC94b3b0rHZ0PQ+p Otqk90g0CHCUzBMT872Na/a/8NrypGsY4/g2DkmFiVbMkfYrTXuaAGtlIZAxp0kV YKXsEQXcVdwD8lE5k7mkNzp/vdm+Et+xrzgvHk2dHztCLnCfdm5Xx4zLkk6sM5tt kYpd2bJsypujAVkV5oSqN+H/xiJCJIAuVsQBeAAtTCaUXh9yiMiF3l9UM22Vc1e4 mE8BG+rh6yDmC+IqH4Za9+YFH4IpWoRRoK+zAFGh492ycPgdAFGsOO/4MA+63ub3 BrZmSXppDiTKZ3MLTgEOD6wJLrLQm5qPwlDcNswqUpW/U/8j4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUoqnw96kLLt37GPcTOJ2nHy4uUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MzZk ZjA1OS04NmNiLTRhN2YtYjQ5ZS00NGUwMTM0ZGZiY2EvM2JkNGY4NzItZTI2Zi0z NWY4LWExM2UtZTc3MTM4Yzc2NWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzM2ZGYwNTktODZjYi00YTdmLWI0 OWUtNDRlMDEzNGRmYmNhLzczNmRmMDU5LTg2Y2ItNGE3Zi1iNDllLTQ0ZTAxMzRk ZmJjYS5jcmwwHwYDVR0jBBgwFoAUWfjw55SEPu1xQW2iHV36v6drGJMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MzZkZjA1OS04NmNiLTRhN2YtYjQ5ZS00NGUw MTM0ZGZiY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQgkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/umcGe6HWdTh710NuYiQHdZiuUXgMfbTW3BGhuarXTwQwxthYrqvbZ /AHTtufAQlX5o2754Nl6xNF6s1cln38mQ/qDZv3jeL3zt0A+Nzz4jRmnB8X1pQdA 2jp/jtPJwqX2zP3qNp9yUjGCSYzDyWE2Wg2vKl5/nD7oQsmdPGDnSjAgLCocb92T ZXKWVhX07lY72IvEjfEzQk5+nHLyt5Q1EbDBYPk7H6DaR8YLcJQc0RGZ8TnzJYbX OrkE5KFQRHqAzHe3H33AJ4LhP0qAmWmF9nzRmzMkENF8Qh+HbtXi0AxSrWykFvuL EDKzvggkXISY4aj0TcXoZoPIDls7PG0= -----END CERTIFICATE-----Generated at Wed Oct 22 00:11:46 2025 by rpki-client